Yes, it runs Tripwire. There is nothing unusual in it's logs.
I wanted to have some sureness. That message NEVER apeared on that machine
before and chkrootkit is running about one year. In the same time I found
some trojans originating from web sites on another Windoze machine on my
network. So I got scared if my router couldn't be hacked.
May be, the "LKM" message was done because of some process terminated as you
wrote. It's also used as a mailserver with AV daemons, so there are such
"temporary" processes.
But what about the /var/log/messages logs absence ?
And, how to test the machine, if it is healthy ?
Peter Rosa
P.S Sorry, if this is not the PROPER list, but I'm a member of few another
lists and this one seems as proper as possible for me. It's about SECURITY,
isn't it ?
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"